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Abstract. In 1991, Michael Gelfond introduced the language of epistemic speci- 
fications. The goal was to develop tools for modeling problems that require some 
form of meta-reasoning, that is, reasoning over multiple possible worlds. De- 
spite their relevance to knowledge representation, epistemic specifications have 
received relatively little attention so far. In this paper, we revisit the formalism of 
epistemic specification. We offer a new definition of the formalism, propose sev- 
eral semantics (one of which, under syntactic restrictions we assume, turns out to 
be equivalent to the original semantics by Gelfond), derive some complexity re- 
sults and, finally, show the effectiveness of the formalism for modeling problems 
requiring meta-reasoning considered recently by Faber and Woltran. All these 
results show that epistemic specifications deserve much more attention that has 
been afforded to them so far. 



1 Introduction 

Early 1990s were marked by several major developments in knowledge representation 
and nonmonotonic reasoning. One of the most important among them was the intro- 
duction of disjunctive logic programs with classical negation by Michael Gelfond and 
Vladimir Lifschitz [ 1 1. The language of the formalism allowed for rules 

Hi V . . . V H k <- Bx, . . . , B m , not B m+ x, ...,not B n , 

where Hi and Bi are classical literals, that is, atoms and classical or strong negations 
(-i) of atoms. In the paper, we will write "strong" rather than "classical" negation, as it 
reflects more accurately the role and the behavior of the operator. The answer-set se- 
mantics for programs consisting of such rules, introduced in the same paper, generalized 
the stable-model semantics of normal logic programs proposed a couple of years earlier 
also by Gelfond and Lifschitz (2). The proposed extensions of the language of nor- 
mal logic programs were motivated by knowledge representation considerations. With 
two negation operators it was straightforward to distinguish between P being false by 
default (there is no justification for adopting P), and P being strongly false (there is 
evidence for ->P). The former would be written as not P while the latter as ->P, And 
with the disjunction in the head of rules one could model "indefinite" rules which, when 



applied, provide partial information only (one of the alternatives in the head holds, but 
no preference to any of them is given). 

Soon after disjunctive logic programs with strong negation were introduced, Michael 
Gelfond proposed an additional important extension, this time with a modal operator 
151 . He called the resulting formalism the language of epistemic specifications. The 
motivation came again from knowledge representation. The goal was to provide means 
for the "correct representation of incomplete information in the presence of multiple 
extensions" 0. 

Surprisingly, despite their evident relevance to the theory of nonmonotonic reason- 
ing as well as to the practice of knowledge representation, epistemic specifications have 
received relatively little attention so far. This state of affairs may soon change. Recent 
work by Faber and Woltran on meta-reasoning with answer-set programming [4 1 shows 
the need for languages, in which one could express properties holding across all answer 
sets of a program, something Michael Gelfond foresaw already two decades ago. 

Our goal in this paper is to revisit the formalism of epistemic specifications and 
show that they deserve a second look, in fact, a place in the forefront of knowledge rep- 
resentation research. We will establish a general semantic framework for the formalism, 
and identify in it the precise location of Gelfond's epistemic specifications. We will de- 
rive several complexity results. We will also show that the original idea of Gelfond to 
use a modal operator to model "what is known to a reasoner" has a broader scope of 
applicability. In particular, we will show that it can also be used in combination with 
the classical logic. 

Complexity results presented in this paper provide an additional motivation to study 
epistemic specifications. Even though programs with strong negation often look "more 
natural" as they more directly align with the natural language description of knowledge 
specifications, the extension of the language of normal logic programs with the strong 
negation operator does not actually increase the expressive power of the formalism. 
This point was made already by Gelfond and Lifschitz, who observed that there is a 
simple and concise way to compile the strong negation away. On the other hand, the 
extension allowing the disjunction operator in the heads of rules is an essential one. 
As the complexity results show [5 6], the class of problems that can be represented 
by means of disjunctive logic programs is strictly larger (assuming no collapse of the 
polynomial hierarchy) than the class of problems that can be modeled by normal logic 
programs. In the same vein, extension by the modal operator along the lines proposed 
by Gelfond is essential, too. It does lead to an additional jump in the complexity. 

2 Epistemic Specifications 

To motivate epistemic specifications, Gelfond discussed the following example. A cer- 
tain college has these rules to determine the eligibility of a student for a scholarship: 

1 . Students with high GPA are eligible 

2. Students from underrepresented groups and with fair GPA are eligible 

3. Students with low GPA are not eligible 



4. When these rules are insufficient to determine eligibility, the student should be 
interviewed by the scholarship committee. 



Gelfond argued that there is no simple way to represent these rules as a disjunctive logic 
program with strong negation. There is no problem with the first three rules. They are 
modeled correctly by the following three logic program rules (in the language with both 
the default and strong negation operators): 

1. eligible{X) <- highGPA(X) 

2. eligible(X) 4- underrep(X) JairGPA(X) 

3. ->eligible(X) <- lowGPA(X). 

The problem is with the fourth rule, as it has a clear meta-reasoning flavor. It should 
apply when the possible worlds (answer sets) determined by the first three rules do 
not fully specify the status of eligibility of a student a: neither all of them contain 
eligible(a) nor all of them contain -^eligible(a). An obvious attempt at a formalization: 

4. interview(X) <— not eligible(X), not ->eligible(X) 

fails. It is just another rule to be added to the program. Thus, when the answer-set 
semantics is used, the rule is interpreted with respect to individual answer sets and not 
with respect to collections of answer-sets, as required for this application. For a concrete 
example, let us assume that all we know about a certain student named Mike is that 
Mike's GPA is fair or high. Clearly, we do not have enough information to determine 
Mike's eligibility and so we must interview Mike. But the program consisting of rules 
(l)-(4) and the statement 

5. fairGPA(mike) V highGPA{mike) 

about Mike's GPA, has two answer sets: 

{highGPA(mike), eligible(mike)} 
{fairGPA(mike), interview (mike)} . 

Thus, the query ? 'interview (mike) has the answer "unknown." To address the prob- 
lem, Gelfond proposed to extend the language with a modal operator K and, speaking 
informally, interpret premises K(f as "t/p is known to the program" (the original phrase 
used by Gelfond was "known to the reasoner"), that is, true in all answer-sets. With this 
language extension, the fourth rule can be encoded as 

4'. interview(X) <— not K eligible(X), not K->eligible(X) 

which, intuitively, stands for "interview if neither the eligibility nor the non-eligibility 
is known." 

The way in which Gelfond [3| proposed to formalize this intuition is strikingly 
elegant. We will now discuss it. We start with the syntax of epistemic specifications. As 
elsewhere in the paper, we restrict attention to the propositional case. We assume a fixed 



infinite countable set At of atoms and the corresponding language C of propositional 
logic. A literal is an atom, say A, or its strong negation -iA. A simple modal atom is 
an expression Kip, where ip £ C, and a simple modal literal is defined accordingly. An 
epistemic premise is an expression (conjunction) 

Ei, ...,E S , not E s+1 , ...,not E t , 

where every E it 1 < i < t, is a simple modal literal. An epistemic rule is an expression 
of the form 

L\ V . . . V L k <— Lk+i, • • • , L m , not L m+ i, . . . , not L n , E, 

where every Li, 1 < i < k, is a literal, and E is an epistemic premise. Collections of 
epistemic rules are epistemic programs. It is clear that (ground versions of) rules (l)-(5) 
and (4') are examples of epistemic rules, with rule (4') being an example of an epistemic 
rule that actually takes advantage of the extended syntax. Rules such as 

a V -<d b, not -ic, -*K{d V ->c) 
-id <— ->c, raof -iK(-i(a Ac)->fc) 

are also examples of epistemic rules. We note that the language of epistemic programs 
is only a fragment of the language of epistemic specifications by Gelfond. However, it is 
still expressive enough to cover all examples discussed by Gelfond and, more generally, 
a broad range of practical applications, as natural-language formulations of domain 
knowledge typically assume a rule-based pattern. 

We move on to the semantics, which is in terms of world views. The definition of 
a world view consists of several steps. First, let W be a consistent set of literals from 
C. We regard W as a three-valued interpretation of £ (we will also use the term three- 
valued possible world), assigning to each atom one of the three logical values t, f and u. 
The interpretation extends by recursion to all formulas in C, according to the following 
truth tables 
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Fig. 1. Truth tables for the 3-valued logic of Kleene. 



By a three-valued possible-world structure we mean a non-empty family of con- 
sistent sets of literals (three-valued possible worlds). Let A be a three-valued possible- 
world structure and let W be a consistent set of literals. For every formula <p 6 C, we 
define 



1. (A,W) \= tp, if v w {<p) =t 

2. {A, W) \= Kip, if for every V e A, v v {ip) = t 

3. (A, W) |= -iKtp, if there isV e A such that v v {<p) = f ■ 

Next, for every literal or simple modal literal L, we define 

4. (.4, W) \= not L if (A, W) Y= L. 

We note that neither (A, W) \= K<p nor {A, W) \= ^Kip depend on W. Thus, we will 
often write A \= F, when F is a simple modal literal or its default negation. 

In the next step, we introduce the notion of the G-reduct of an epistemic program. 

Definition 1. Let P be an epistemic program, A a three-valued possible-world struc- 
ture and W a consistent set of literals. The G-reduct of P with respect to (A, W), in 
symbols p( A ' W ), consists of the heads of all rules r £ P such that (A, W) |= a, for 
every conjunct a occurring in the body ofr. 

Let H be a set of disjunctions of literals from C A set W of literals is closed with 
respect to H if W is consistent and contains at least one literal in common with every 
disjunction in H. We denote by Min(H) the family of all minimal sets of literals that 
are closed with respect to H. With the notation Min(H) in hand, we are finally ready 
to define the concept of a world view of an epistemic program P. 

Definition 2. A three-valued possible-world structure A is a world view of an epis- 
temic program P if A = {W \ W G Min{P( A > w ^> )}. 

Remark 1. The G-reduct of an epistemic program consists of disjunctions of literals. 
Thus, the concept of a world view is well defined. 

Remark 2. We note that Gelfond considered also inconsistent sets of literals as minimal 
sets closed under disjunctions. However, the only such set he allowed consisted of all 
literals. Consequently, the difference between the Gelfond's semantics and the one we 
described above is that some programs have a world view in the Gelfond's approach 
that consists of a single set of all literals, while in our approach these programs do not 
have a world view. But in all other cases, the two semantics behave in the same way. 

Let us consider the ground program, say P, corresponding to the scholarship eligi- 
bility example (rule (5), and rules (l)-(3) and (4'), grounded with respect to the Her- 
brand universe {mike}). The only rule involving simple modal literals is 

interview (mike) <— not K eligible(mike) , not K^eligible(mike). 

Let A be a world view of P. Being a three-valued possible-world structure, A ^ 0. 
No matter what W we consider, no minimal set closed with respect to p(A,w) con _ 
tains lowGPA(mike) and, consequently, no minimal set closed with respect to p( A ' W ) 
contains ^eligible(mike). It follows that A y= K^eligible(mike). 



Let us assume that A \= K eligible(mike). Then, no reduct p( A ' W ) contains 
inter view (mike). Let W = {fairGP (mike)} . It follows that p( A > w ) consists only of 
fairGPA(mike) V highGPA(mike). Clearly, W G Min(P^ A ' W ^) and, consequently, 
W S A. Thus, „4 ^= K eligible(mike), a contradiction. 

It must be then that A f= raof K eligible(mike) and .4 |= no£ K^eligible(mike). 
Let be an arbitrary consistent set of literals. Clearly, the reduct p( A > w ) contains 
interview (mike) and fairGPA(mike) V highGPA(mike) . If highGPA(mike) € W, 
the reduct also contains eligible(mike). Thus, e Mm(P^'^) if and only if 

W = {fairGPA(mike),interview(mike)}, or 

W = {highGPA(mike),eligible(mike),interview(mike)}. 

It follows that if A is a world view for P then it consists of these two possible worlds. 
Conversely, it is easy to check that a possible-world structure consisting of these two 
possible worlds is a world view for P. Thus, interview(mike) holds in A, and so our 
representation of the example as an epistemic program has the desired behavior. 

3 Epistemic Specifications — a Broader Perspective 

The discussion in the previous section demonstrates the usefulness of formalisms such 
as that of epistemic specifications for knowledge representation and reasoning. We will 
now present a simpler yet, in many respects, more general framework for epistemic 
specifications. The key to our approach is that we consider the semantics given by two- 
valued interpretations (sets of atoms), and standard two-valued possible-world struc- 
tures (nonempty collections of two-valued interpretations). We also work within a rather 
standard version of the language of modal propositional logic and so, in particular, we 
allow only for one negation operator. Later in the paper we show that epistemic speci- 
fications by Gelfond can be encoded in a rather direct way in our formalism. Thus, the 
restrictions we impose are not essential even though, admittedly, not having two kinds 
of negation in the language in some cases may make the modeling task harder. 

We start by making precise the syntax of the language we will be using. As we stated 
earlier, we assume a fixed infinite countable set of atoms At. The language we consider 
is determined by the set At, the modal operator K, and by the boolean connectives _L 
(0-place), and A, V, and — s> (binary). The BNF expression 

<fi ■■■= -L\A\(<pA<p) I (<P V <p) | (<P -> <p) | Kip, 

where A e At, provides a concise definition of a formula. The parentheses are used 
only to disambiguate the order of binary connectives. Whenever possible, we omit them. 
We define the unary negation connective -i and the 0-place connective T as abbrevia- 
tions: 



-up ::= ip — > _L 
T ::= 



We call formulas Kip, where ip € Ck , modal atoms (simple modal atoms that we 
considered earlier and will consider below are special modal atoms with if -depth equal 
to 1). We denote this language by Ck and refer to subsets of Ck as epistemic theories. 
We denote the modal-free fragment of Ck by C. 

While we will eventually describe the semantics (in fact, several of them) for arbi- 
trary epistemic theories, we start with an important special case. Due to close analogies 
between the concepts we define below and the corresponding ones defined earlier in the 
context of the formalism of Gelfond, we "reuse" the terms used there. Specifically, by 
an epistemic premise we mean a conjunction of simple modal literals. Similarly, by an 
epistemic rule we understand an expression of the form 

E Aii A . . . A L m -)• A 1 V . . . V A n , (1) 

where E is an epistemic premise, i^'s are literals (in C) and Aj's are atoms. Finally, we 
call a collection of epistemic rules an epistemic program. It will always be clear from 
the context, in which sense these terms are to be understood. 

We stress that -i is not a primary connective in the language but a derived one (it 
is a shorthand for some particular formulas involving the rule symbol). Even though 
under some semantics we propose below this negation operator has features of default 
negation, under some others it does not. Thus, we selected for it the standard negation 
symbol -i rather than the "loaded" not . 

A (two- valued) possible-world structure is any nonempty family A of subsets of At 
(two-valued interpretations). In the remainder of the paper, when we use terms "inter- 
pretation" and "possible-world structure" without any additional modifiers, we always 
mean a two-valued interpretation and a two-valued possible-world structure. 

Let A be a possible-world structure and tp € C. We recall that A \= Kip precisely 
when W \= ip, for every W € A, and A \= -*Kip, otherwise. We will now define the 
epistemic reduct of an epistemic program with respect to a possible-world structure. 

Definition 3. Let P C Ck be an epistemic program and let A be a possible-world 
structure. The epistemic reduct of P with respect to A, P A in symbols, is the theory 
obtained from P as follows: eliminate every rule with an epistemic premise E such that 
A ^= E; drop the epistemic premise from every remaining rule. 

It is clear that P A C C, and that it consists of rules of the form 

Li A . . . A L m -»• At V . . . V A n , (2) 

where Li's are literals (in C) and Ai's are atoms. 

Let P be a collection of rules (|2). Then, P is a prepositional theory. Thus, it can 
be interpreted by the standard prepositional logic semantics. However, P can also be 
regarded as a disjunctive logic program (if we write rules from right to left rather than 
from left to right). Consequently, P can also be interpreted by the stable-model seman- 
tics 02111 and the supported-model semantics [7 8 9 10 1. (For normal logic programs, 
the supported-model semantics was introduced by Apt et al. [7 |. The notion was ex- 
tended to disjunctive logic programs by Baral and Gelfond [8 |. We refer to papers by 



Brass and Dix [9], Definition 2.4, and Inoue and Sakama [ 10], Section 5, for more de- 
tails). We write A4(P), ST(P) and SV(P) for the sets of models, stable models and 
supported models of P, respectively. An important observation is that each of these 
semantics gives rise to the corresponding notion of an epistemic extension. 

Definition 4. Let P C Ck be an epistemic program. A possible-world structure A is 
an epistemic model ( respectively, an epistemic stable model, or an epistemic supported 
modelj ofP, if A = M(P A ) (respectively, A = ST(P A ) or A= SP(P A )). 

It is clear that Definition|4]can easily be adjusted also to other semantics of proposi- 
tional theories and programs. We briefly mention two such semantics in the last section 
of the paper. 

We will now show that epistemic programs with the semantics of epistemic sta- 
ble models can provide an adequate representation to the scholarship eligibility exam- 
ple for Mike. The available information can be represented by the following program 

P(mike) C Ck' 

1. eligible(mike) A neligible(mike) — > _L 

2. fairGPA(mike) V highGPA(mike) 

3. highGPA(mike) — > eligible(mike) 

4. under rep(mike) A fairGPA(mike) — ¥ eligible(mike) 

5. lowGPA(mike) —> neligible(mike) 

6. ->K eligible(mike), —iK neligible(mike) — ¥ interview (mike). 

We use the predicate neligible to model the strong negation of the predicate eligible 
that appears in the representation in terms of epistemic programs by Gelfond (thus, in 
particular, the presence of the first clause, which precludes the facts eligible(mike) and 
neligible(mike) to be true together). This extension of the language and an extra rule 
in the representation is the price we pay for eliminating one negation operator. 

Let A consist of the interpretations 

W\ = {fairGPA(mike),interview(mike)} 

Wi = {highGPA(mike), eligible(mike),interview(mike)}. 

Then the reduct [P(mike)] A consists of rules (l)-(5), which are unaffected by the 
reduct operation, and of the fact inter view(mike), resulting from rule (6) when the 
reduct operation is performed (as in logic programming, when a rule has the empty 
antecedent, we drop the implication symbol from the notation). One can check that 
A = {Wi, W2} = tST([-P(mifce)]" 4 ). Thus, A is an epistemic stable model of P (in 
fact, the only one). Clearly, interview(mike) holds in the model (as we would expect 
it to), as it holds in each of its possible-worlds. We note that in this particular case, the 
semantics of epistemic supported models yields exactly the same solution. 

4 Complexity 



We will now study the complexity of reasoning with epistemic (stable, supported) mod- 
els. We provide details for the case of epistemic stable models, and only present the 



results for the other two semantics, as the techniques to prove them are very similar to 
those we develop for the case of epistemic stable models. 

First, we note that epistemic stable models of an epistemic program P can be rep- 
resented by partitions of the set of all modal atoms of P. This is important as a priori 
the size of possible-world structures one needs to consider as candidates for epistemic 
stable models may be exponential in the size of a program. Thus, to obtain good com- 
plexity bounds alternative polynomial- size representations of epistemic stable models 
are needed. 

Let P C Lk be an epistemic program and (<P, <&) be the set of modal atoms of P 
(all these modal atoms are, in fact, simple). We write P\&^ for the program obtained 
from P by eliminating every rule whose epistemic premise contains a conjunct Kip, 
where Kijj £ if - , or a conjunct ->K<p, where K(p £ <P (these rules are '"blocked" by 
QP, <?")), and by eliminating the epistemic premise from every other rule of P. 

Proposition 1. Let P C Ck be an epistemic program. If a possible-world structure A 
is an epistemic stable model of P, then there is a partition { < P, X 1/) of the set of modal 
atoms of P such that 

1. ST{P\$,#) ± 

2. For every Kip £ <S>, tp holds in every stable model of P\$ 

3. For every Kip £ ip does not hold in at least one stable model of P\^ y. 

Conversely, if there are such partitions, P has epistemic stable models. 

It follows that epistemic stable models can be represented by partitions (<P, tf) sat- 
isfying conditions (l)-(3) from the proposition above. 

We observe that deciding whether a partition <?") satisfies conditions (l)-(3) from 
Proposition Q] can be accomplished by polynomially many calls to an -oracle and, 
if we restrict attention to non-disjunctive epistemic programs, by polynomially many 
calls to an TVP-oracle. 

Remark 3. If we adjust Proposition[T]by replacing the term "stable" with the term "sup- 
ported," and replacing STQ with SV(), we obtain a characterization of epistemic sup- 
ported models. Similarly, omitting the term "stable," and replacing STQ with A4Q 
yields a characterization of epistemic models. In each case, one can decide whether a 
partition (<l>, !f) satisfies conditions (l)-(3) by polynomially many calls to an 7VP-oracle 
(this claim is evident for the case of epistemic models; for the case of epistemic sup- 
ported models, it follows from the fact that supported models semantics does not get 
harder when we allow disjunctions in the heads or rules). 

Theorem 1. The problem to decide whether a non-disjunctive epistemic program has 
an epistemic stable model is -complete. 

Proof: Our comments above imply that the problem is in the class JCf . Let F = 
3YVZ0, where is a DNF formula. The problem to decide whether F is true is In- 
complete. We will reduce it to the problem in question and, consequently, demonstrate 



its -hardness. To this end, we construct an epistemic program Q C Ck by including 
into Q the following clauses (atoms w, y', y G Y, and z', z E Z are fresh): 

1 . Ky — > y ; and i^y' — > y', for every y E Y 

2. y A y' — > ; and -iy A ->y' — > , for every y E Y 

3. -iz' — > ; and -iz — > z', for z£Z 

4. er(ui) A ... A cr(ufe) — > w , where ui A ... A life is a disjunct of 6>, and cr(-ia) = a' 
and tr(a) = a, for every a G Y U Z 

5. -i-ftTw . 

Let us assume that A is an epistemic stable model of Q. In particular, A ^ 0. It 
must be that „4 |= ifw (otherwise, Q' 4 has no stable models, that is, A = 0). Let us 
define A = {y G Y | A \= Ky}, and B = {y G Y | .4 |= ify'}. It follows that Q- 4 
consists of the following rules: 

1. y, for y G A and y', for y G B 

2. y A y' — > ; and -iy A -ij/' — ^ , for every y G Y 

3. -iz' — > z ; and -*z — > z', for z G Z 

4. cr(ui) A ... A er(ufc) — > u> , where ui A . . . A Uk is a disjunct of 6>, and cr(-ia) = a' 
and er(a) = a, for every a G Y U Z. 

Since A = ST(Q A ) and ^ ^ 0, B = Y \ A (due to clauses of type (2)). It is clear 
that the program Q A has stable models and that they are of the form A U {y' \ y G 
Y \ A} U D U {z 1 1 z G Z \ D}, if that set does not imply w through a rule of type 
(4), or A U {y' \ y G Y \ A} U D U {z' \ z G Z \ D} U {w}, otherwise, where D is 
any subset of Z. As A \= Kw, there are no stable models of the first type. Thus, the 
family of stable models of Q A consists of all sets A U {y' | y G Y \ A} U D U {z' | z G 
Z \ D} U {w}, where D is an arbitrary subset of Z. It follows that for every D C Z, the 
set A U {y' | y G Y \ A} U L> U {z' | z G Z \ D} satisfies the body of at least one rule 
of type (4). By the construction, for every D C Z, the valuation of Y U Z determined 
by A and D satisfies the corresponding disjunct in and so, also 0. In other words, 
3YMZ0 is true. 

Conversely, let 3YMZ0 be true. Let A be a subset of Y such that (S^y/^ holds for 
every truth assignment of Z (by 0\y/a, we mean the formula obtained by simplifying 
the formula Q with respect to the truth assignment of Y determined by A). Let A consist 
of all sets of the form A U {y' \ y G Y \ A} U D U {z 1 z G Z \ D} U {w}, where 
Z) C Z. It follows that Q- 4 consists of clauses (l)-(4) above, with B = Y \ A. Since 
MZ0\a/y holds, it follows that A is precisely the set of stable models of Q A . Thus, A 
is an epistemic stable model of Q. □ 

In the general case, the complexity goes one level up. 

Theorem 2. The problem to decide whether an epistemic program P G Ck has an 
epistemic stable model is E% -complete. 

Proof: The membership follows from the earlier remarks. To prove the hardness part, 
we consider a QBF formula F = 3XVY3Z0, where is a 3-CNF formula. For each 



atom x E X (y E Y and z E Z, respectively), we introduce a fresh atom x' (y' and z', 
respectively). Finally, we introduce three additional fresh atoms, w, / and g. 

We now construct a disjunctive epistemic program Q by including into it the fol- 
lowing clauses: 

1. Kx — > x; and Kx' — > x', for every x E X 

2. x Ax' — >; and ->x A -<x' — h for every x E X 

3. -.5 -> /; and -./->• 5 

4. / — >• y V y'; and / — >■ 2 V z', for every 1/67 and z£Z 

5. /Aw-Jz; and / Am z', for every z E Z 

6. / A cr(ui) A er(u2) A cr(u3) — > to, for every clause C — u\ V «2 V u 3 of 0, where 
cr(a) = a' and ct(->o) = a, for every a E X U F U Z 

7. / A ->io — > w 

8. -.A"-™ ->■ 

Let us assume that 3XVY3Z& is true. Let A C X describe the truth assignment on 
X so that \/Y3Z<P x /A holds (we define m tne proof of the previous result). We 

will show that Q has an epistemic stable model A = {A U {a' | a E X \ A} U {<?}}. 
Clearly, Kx, x E A, and if x', x E X \ A, are true in A Also, K^w is true in A All 
other modal atoms in Q are false in A Thus, Q A consists of rules x, for x E A, x', for 
x E X \ A and of rules (2)-(7) above. Let M be a stable model of Q" 4 containing /. 
It follows that w E M and so, Z D Z' C M. Moreover, the Gelfond-Lifschitz reduct 
of Q A with respect to M consists of rules x, for x E A, x', for x E X \ A, all -i-free 
constraints of type (2), rule /, and rules (4)-(6) above, and M is a minimal model of 
this program. 

Let B = Y n M. By the minimality of M, M = A U {x' \ x E X \ A} U B U 
{y' \ y E Y \ B}U Z U Z' U {f, w}. Since VY3Z$ X/A holds, 3Z<P x/AiY/B holds, 
too. Thus, let D C Z be a subset of Z such that &x/a,y/b,z/d is ti" ue - It follows that 
M' = A U {x' I x E X \ A} U B U {?/ | y E Y \ B} U D U {z' | z E Z \ D} U {/} 
is also a model of the Gelfond-Lifschitz reduct of Q A with respect to M, contradicting 
the minimality of M. 

Thus, if M is an answer set of Q A , it must contain g. Consequently, it does not 
contain / and so no rules of type (4)-(7) contribute to it. It follows that M = A U 
{a' I a E X \ A} U {g} and, as it indeed is an answer set of Q A , A = ST(Q A ). Thus, 
A is a epistemic stable model, as claimed. 

Conversely, let as assume that Q has an epistemic stable model, say, A It must be 
that A \= K^w (otherwise, Q A contains a contradiction and has no stable models). Let 
us define A = {x E X | A \= Kx} and B = {x E X | A \= Kx'}. It follows that Q A 
consists of the clauses: 

1. x, for x E A and x', forxEB 

2. x Ax' — >; and ->x A -<x' — >, for every x E X 

3. -ig — > /; and -1/ — > g 

4. / — >• y V y'; and / — >• z V z', for every y EY and z E Z 

5. /Aw-Jz; and f Aw ^ z', for every z E Z 



6. / A <t(ui) A <j{u2) A <t(u 3 ) — > w, for every clause C = u\ V u 2 V u 3 of <£, where 
cr(a) = a' and cr(->a) = a, for every a 6 X U Y U Z. 

7. /, — > w 

We have that .4 is precisely the set of stable models of this program. Since A ^ 0, 
B = X \ A. If M is a stable model of Q- 4 and contains /, then it contains w. But 
then, as M G A, A \/= K^w, a contradiction. It follows that there is no stable model 
containing /. That is, the program consisting of the following rules has no stable model: 

1 . x, for x e A and x', for x G X \ A 

2. y V y'\ and z V z', for every y G Y and z G Z 

3. u> — >• z; and w — > z', for every zeZ 

4. er(ui) A (7(^2) A 17(^3) — > w, for every clause C = u\ V u 2 V U3 of 6 1 , where 
cr(a) = a' and cr(-ia) = a, for every a e X L)Y Li Z. 

5. -<w — > w 

But then, the formula VY3ZO\ x /a is tme an d, consequently, the formula 3XVY3ZO 
is true, too. □ 

For the other two epistemic semantics, Remark 1 implies that the problem of the 
existence of an epistemic model (epistemic supported model) is in the class E 2 '. The 
£ 2 -hardness of the problem can be proved by similar techniques as those we used for 
the case of epistemic stable models. Thus, we have the following result. 

Theorem 3. The problem to decide whether an epistemic program P C Ck has an 
epistemic model (epistemic supported model, respectively) is S 2 '-complete. 



5 Modeling with Epistemic Programs 

We will now present several problems which illustrate the advantages offered by the lan- 
guage of epistemic programs we developed in the previous two sections. Whenever we 
use predicate programs, we understand that their semantics is that of the corresponding 
ground programs. 

First, we consider two graph problems related to the existence of Hamiltonian cy- 
cles. Let G be a directed graph. An edge in G is critical if it belongs to every hamilto- 
nian cycle in G. The following problems are of interest: 

1. Given a directed graph G, find the set of all critical edges of G 

2. Given a directed graph G, and integers p and k, find a set R of no more than p new 
edges such that G U R has no more than k critical edges. 

Let HC(vtx, edge) be any standard ASP encoding of the Hamiltonian cycle prob- 
lem, in which predicates vtx and edge represent G, and a predicate he represents edges 
of a candidate hamiltonian cycle. We assume the rules of HC(vtx, edge) are written 
from left to right so that they can be regarded as elements of C. Then, simply adding to 
HC(vtx, edge) the rule: 



Khc(X, Y) -> critical(X, Y) 



yields a correct representation of the first problem. We write HC cr (vtx 7 edge) to denote 
this program. Also, for a directed graph G — (V, E), we define 

D = {vtx(v) | v G V} U {edge(u, w) | (w, w) G E}. 

We have the following result. 

Theorem 4. Let G — (V,E) be a directed graph. If HC cr (vtx,edge) U D has no 
epistemic stable models, then every edge in G is critical (trivially). Otherwise, the epis- 
temic program HC cr (vtx, edge) U D has a unique epistemic stable model A and the 
set {(v, w) | A |= critical(u, v)} is the set of critical edges in G. 

Proof (Sketch): Let H be the grounding of HC cr (vtx, edge)UD. If H has no epistemic 
stable models, it follows that the "non-epistemic" part H' of H has no stable models 
(as no atom of the form critical(x, y) appears in it). As H' encodes the existence of 
a hamiltonian cycle in G, it follows that G has no Hamiltonian cycles. Thus, trivially, 
every edge of G belongs to every Hamiltonian cycle of G and so, every edge of G is 
critical. 

Thus, let us assume that A is an epistemic stable model of H. Also, let 5* be the 
set of all stable models of H' (they correspond to Hamiltonian cycles of G; each model 
contains, in particular, atoms of the form hc(x, y), where (x, y) ranges over the edges 
of the corresponding Hamiltonian cycle). The reduct H A consists of H' (non-epistemic 
part of H is unaffected by the reduct operation) and of C", a set of some facts of the 
form critical (x, y ). Thus, the stable models of the reduct are of the form MUC", where 
M G S. That is, A = {M U C' | M G S}. Let us denote by C the set of the atoms 
critical(x, y), where (x, y) belongs to every hamiltonian cycle of G (is critical). One 
can compute now that H A = H' U C. Since A = ST(H A ), A = {M U C | M G S}. 
Thus, HC cr (vtx, edge) U D has a unique epistemic stable model, as claimed. It also 
follows that the set {(v, w) \ A \= critical(u, v)} is the set of critical edges in G. □ 

To represent the second problem, we proceed as follows. First, we "select" new 
edges to be added to the graph and impose constraints that guarantee that all new edges 
are indeed new, and that no more than p new edges are selected (we use here Iparse 
syntax for brevity; the constraint can be encoded strictly in the language Ck)- 

vtx(X) A vtx(Y) ->• newEdge(X, Y) 

newEdge(X, Y) A edge(X, Y) ± 

(p + \){newEdge{X, Y) : vtx(X), vtx(Y)} ->• _L. 

Next, we define the set of edges of the extended graph, using a predicate edgeEG: 

edge(X,Y) ->■ edgeEG(X,Y) 
newEdge(X,Y) ->■ edgeEG(X,Y) 

Finally, we define critical edges and impose a constraint on their number (again, ex- 
ploiting the Iparse syntax for brevity sake): 



edgeEG(X, Y) A Khc(X, Y) -> critical (X, Y) 
(k + l){critical(X, Y) : edgeEG(X, Y)} -> _L. 

We define Q to consist of all these rules together with all the rules of the program 
HC(vtx, edgeEG). We now have the following theorem. The proof is similar to that 
above and so we omit it. 

Theorem 5. Let G be a directed graph. There is an extension of G with no more than 
p new edges so that the resulting graph has no more than k critical edges if and only if 
the program Q U D has an epistemic stable model. 

For another example we consider the unique model problem: given a CNF formula 
F, the goal is to decide whether F has a unique minimal model. The unique model 
problem was also considered by Faber and Woltran [4|. We will show two encodings 
of the problem by means of epistemic programs. The first one uses the semantics of 
epistemic models and is especially direct. The other one uses the semantics of epistemic 
stable models. 

Let F be a propositional theory consisting of constraints L\ A . . . A L^ — > _L, where 
L.^s are literals. Any propositional theory can be rewritten into an equivalent theory of 
such form. We denote by F K the formula obtained from F by replacing every atom x 
with the modal atom Kx. 

Theorem 6. For every theory FCC consisting of constraints, F has a least model if 
and only if the epistemic program F U F has an epistemic model. 

Proof: Let us assume that F has a least model. We define A to consist of all models 
of F, and we denote the least model of F by M. We will show that A is an epistemic 
model of F U F K . Clearly, for every x 6 M, A \= Kx. Similarly, for every x $ M, 
A \= -'Kx. Thus, [F K ] A = 0. Consequently, [F U F K ] A = F and so, A is precisely 
the set of all models of [F U F } . Thus, A is an epistemic model. 

Conversely, let A be an epistemic model of F U F K . It follows that [F K ] A = 
(otherwise, [F U F ] contains _L and A would have to be empty, contradicting the 
definition of an epistemic model). Thus, [F U F K ] A — F and consequently, A is the 
set of all models of F. Let M = {x e At \ A |= Kx} and let 

<2i A . . . A a m A -i&i A ... A ~^b n -> _L (3) 

be a rule in F. Then, 

Kai A ... A Ka m A ~^Kb\ A ... A ->K b n ->■ ± 

is a rule in F K . As [F K ] A = 0, 

A y= Kai A ... A Ka m A -^Kb x A ... A ^Kb n . 

Thus, for some i, 1 < i < m, A ^= Kai, or for some j, 1 < j < n, A \= Kbj. In 
the first case, a, ^ M, in the latter, bj 6 M. In either case, M is a model of rule (0. 



It follows that M is a model of F. Let M' be a model of F. Then M' € .4 and, by the 
definition of M, M C M'. Thus, M is a least model of F. □ 

Next, we will encode the same problem as an epistemic program under the epistemic 
stable model semantics. The idea is quite similar. We only need to add rules to generate 
all candidate models. 

Theorem 7. For every theory FCC consisting of constraints, F has a least model if 
and only if the epistemic program 

F U F K U { -*x — >■ x' | x G At} U {—ix' — > x | x G At} 

has an epistemic stable model. 

We note that an even simpler encoding can be obtained if we use Iparse choice 
rules. In this case, we can replace {^x — > x' | x G At} U {-ix 7 — > x | x G ^4i} with 
{{a;} | a; 6 ^}. 

6 Connection to Gelfond's Epistemic Programs 

We will now return to the original formalism of epistemic specifications proposed by 
Gelfond f3) (under the restriction to epistemic programs we discussed here). We will 
show that it can be expressed in a rather direct way in terms of our epistemic programs 
in the two-valued setting and under the epistemic supported-model semantics. 

The reduction we are about to describe is similar to the well-known one used to 
eliminate the "strong" negation from disjunctive logic programs with strong negation. 
In particular, it requires an extension to the language C. Specifically, for every atom 
x G At we introduce a fresh atom x' and we denote the extended language by C . The 
intended role of x' is to represent in C the literal ->x from C. Building on this idea, we 
assign to each set W of literals in C the set 

W' = (W H At) U {x' | -^x G W}. 

In this way, sets of literals from C (in particular, three-valued interpretations of C) are 
represented as sets of atoms from C' (two-valued interpretations of £')■ 

We now note that the truth and falsity of a formula form C under a three-valued 
interpretation can be expressed as the truth and falsity of certain formulas from C in 
the two-valued setting. The following result is well known. 

Proposition 2. For every formula tp G C there are formulas (p~ , ip + G £' such that for 
every set of literals W (in C) 

1. vw(<p) = t if and only if 'uw'i^) = t 

2. vw(<p) = f if and only if u\v' (f ) = f 

Moreover, the formulas tp~ and ip + can be constructed in polynomial time with respect 
to the size ofcp. 



Proof: This a folklore result. We provide a sketch of a proof for the completeness sake. 
We define ip + and ip~ by recursively as follows: 

1. x + = x and x~ = -ix', if x € At 

2. (-*ip) + = ~^ip~ and (^ip)~ = ~<ip + 

3. (<p V = <P + V -0 + and (95 V = ip~ V the case of the conjunction is 
dealt with analogously 

4. (ip — > = ip~ — > tj} + and (ip ip)~ = ip + — > . 

One can check that formulas p + and p~ defined in this way satisfy the assertion. □ 

We will now define the transformation a that allows us to eliminate strong negation. 
First, for a literal L e £, we now define 



. . (x if L 
a ^ = {x' ifL 



if L = x 

<x 



Furthermore, if E is a simple modal literal or its default negation, we define 

a(E) 



' K<p+ if E = Kip 
->K<p~ ifE = ^Kip 
iK<p+ ifE = not Kip 
Kip" if E = not -iKip 



and for an epistemic premise E = E\ , . . . , E t (where each Ei is a simple modal literal 
or its default negation) we set 

a(E) =a(E 1 )A...Aa(E t ). 

Next, if r is an epistemic rule 

Li V . . . V L k «- Fi, . . . , F m , not F m+1 , ...,not F n ,E 

we define 

cr(r) = a(E)Aa{F 1 )A. . .Aa(F m )A^a{F m+1 )A. . .A^a(F n ) -»• a(Li)V. . .Va(L k ). 

Finally, for an epistemic program P, we set 

a(P) = {cr(r) I r £ P}) U{iAi4 ±}. 

We note that <t(P) is indeed an epistemic program in the language Ck (according to 
our definition of epistemic programs). The role of the rules x A x' — > _L is to ensure that 
sets forming epistemic (stable, supported) models of a(P) correspond to consistent sets 
of literals (the only type of set of literals allowed in world views). 

Given a three-valued possible structure A, we define A' — {W \ W £ „4}, and 
we regard A' as a two-valued possible-world structure. We now have the following 
theorem. 



Theorem 8. Let P be an epistemic program according to Gelfond. Then a three-valued 
possible-world structure A is a world view of P if and only if a two-valued possible- 
world structure A' is an epistemic supported model of a{P). 

Proof (Sketch): Let P be an epistemic program according to Gelfond, A a possible- 
world structure and W a set of literals. We first observe that the G-reduct p( A ' W ) can 
be described as the result of a certain two-step process. Namely, we define the epistemic 
reduct of P with respect to A to be the disjunctive logic program P A obtained from P 
by removing every rule whose epistemic premise E satisfies A ^ E, and by removing 
the epistemic premise from every other rule in P. This construction is the three-valued 
counterpart to the one we employ in our approach. It is clear that the epistemic reduct 
of P with respect to A, with some abuse of notation we will denote it by P A , is a 
disjunctive logic program with strong negation. 

Let Q be a disjunctive program with strong negation and W a set of literals. By 
the supp-reduct of Q with respect to W, R sp (Q, W), we mean the set of the heads of 
all rules whose bodies are satisfied by W (which in the three-valued setting means that 
every literal in the body not in the scope of not is in W, and every literal in the body 
in the scope of not is not in W). A consistent set W of literals is a supported answer 
set of Q if W S Min(R sp (Q, W)) (this is a natural extension of the definition of a 
supported model II7I8I to the case of disjunctive logic programs with strong negation; 
again, we do not regard inconsistent sets of literals as supported answer sets). 

Clearly, P< A > w > = R s p(P a , W). Thus, A is a world view of P according to the 
definition by Gelfond if and only if A is a collection of all supported answer sets of 

We also note that by Proposition^ if E is an epistemic premise, then A \= E if and 

only if A' \= cr(E). It follows that a{P A ) = cr{P) A . In other words, constructing the 
epistemic reduct of P with respect to A and then translating the resulting disjunctive 
logic program with strong negation into the corresponding disjunctive logic program 
without strong negation yields the same result as first translating the epistemic program 
(in the Gelfond's system) into our language of epistemic programs and then computing 
the reduct with respect to A'. We note that there is a one-to-one correspondence be- 
tween supported answer sets of P A and supported models of <r(P A ) (er, when restricted 
to programs consisting of rules without epistemic premises, is the standard transforma- 
tion eliminating strong negation and preserving the stable and supported semantics). 
Consequently, there is a one-to-one correspondence between supported answer sets of 
P A and supported models of cr(P) A (cf. our observation above). Thus, A consists of 

supported answer sets of P A if and only if A' consists of supported models of cr{P) A . 
Consequently, A is a world view of P if and only if A 1 is an epistemic supported model 
ofcr(P). " □ 



7 Epistemic Models of Arbitrary Theories 



So far, we defined the notions of epistemic models, epistemic stable models and epis- 
temic supported models only for the case of epistemic programs. However, this restric- 



tion is not essential. We recall that the definition of these three epistemic semantics 
consists of two steps. The first step produces the reduct of an epistemic program P 
with respect to a possible-world structure, say A. This reduct happens to be (modulo a 
trivial syntactic transformation) a standard disjunctive logic program in the language C 
(no modal atoms anymore). If the set of models (respectively, stable models, supported 
models) of the reduct program coincides with A, A is an epistemic model (respectively, 
epistemic stable or supported model) of P. However, the concepts of a model, stable 
model and supported model are defined for arbitrary theories in C. This is obviously 
well known for the semantics of models. The stable-model semantics was extended to 
the full language C by Ferraris ITD and the supported-model semantics by Truszczyn- 
ski fT2l . Thus, there is no reason precluding the extension of the definition of the cor- 
responding epistemic types of models to the general case. We start be generalizing the 
concept of the reduct. 

Definition 5. Let T be an arbitrary theory in Ck and let Abe a possible-world struc- 
ture. The epistemic reduct ofT with respect to A, T A in symbols, is the theory obtained 
from T by replacing each maximal modal atom Kip with T, if A \= K(p, and with _L, 
otherwise. 

We note that if T is an epistemic program, this notion of the reduct does not coincide 
with the one we discussed before. Indeed, now no rule is dropped and no modal literals 
are dropped; rather modal atoms are replaced with T and _L. However, the replacements 
are executed in such a way as to ensure the same behavior. Specifically, one can show 
that models, stable models and supported models of the two reducts coincide. 

Next, we generalize the concepts of the three types of epistemic models. 

Definition 6. Let T be an arbitrary theory in Ck- A possible-world structure A is an 
epistemic model ( respectively, an epistemic stable model, or an epistemic supported 
model) of P, if A is the set of models ( respectively, stable models or supported models) 
ofM(P A ). 

From the comments we made above, it follows that if T is an epistemic program, 
this more general definition yields the came notions of epistemic models of the three 
types as the earlier one. 

We note that even in the more general setting the complexity of reasoning with 
epistemic (stable, supported) models remains unchanged. Specifically, we have the fol- 
lowing result. 

Theorem 9. The problem to decide whether an epistemic theory T C Ck has an epis- 
temic stable model is -complete. The problem to decide whether an epistemic theory 
T C Ck has an epistemic model (epistemic supported model, respectively) is Un- 
complete. 

Proof(Sketch): The hardness part follows from our earlier results concerning epistemic 
programs. To prove membership, we modify Proposition^ and show a polynomial time 
algorithm with a oracle (NP oracle for the last two problems) that decides, given a 
propositional theory S and a modal formula Kip (with tp e Ck and not necessarily in 
C) whether ST(S) \= Kip (respectively, M(S) \= Kip, or SV{S) \= Kip). □ 



8 Discussion 



In this paper, we proposed a two-valued formalism of epistemic theories — subsets 
of the language of modal propositional logic. We proposed a uniform way, in which 
semantics of propositional theories (the classical one as well as nonmonotonic ones: 
stable and supported) can be extended to the case of epistemic theories. We showed that 
the semantics of epistemic supported models is closely related to the original seman- 
tics of epistemic specifications proposed by Gelfond. Specifically we showed that the 
original formalism of Gelfond can be expressed in a straightforward way by means of 
epistemic programs in our sense under the semantics of epistemic supported models. 
Essentially all that is needed is to use fresh symbols x' to represent strong negation -<x, 
and use the negation operator of our formalism, ip — s- _L or, in the shorthand, -«p, to 
model the default negation not <p. 

We considered in more detail the three semantics mentioned above. However, other 
semantics may also yield interesting epistemic counterparts. In particular, it is clear that 
Definition [6] can be used also with the minimal model semantics or with the Faber- 
Leone-Pfeifer semantics [ 13 1. Each semantics gives rise to an interesting epistemic for- 
malism that warrants further studies. 

In logic programming, eliminating strong negation does not result in any loss of the 
expressive power but, at least for the semantics of stable models, disjunctions cannot 
be compiled away in any concise way (unless the polynomial hierarchy collapses). In 
the setting of epistemic programs, the situation is similar. The strong negation can be 
compiled away. But the availability of disjunctions in the heads and the availability of 
epistemic premises in the bodies of rules are essential. Each of these factors separately 
brings the complexity one level up. Moreover, when used together under the semantics 
of epistemic stable models they bring the complexity two levels up. This points to the 
intrinsic importance of having in a knowledge representation language means to repre- 
sent indefiniteness in terms of disjunctions, and what is known to a program (theory) 
— in terms of a modal operator K. 
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